Digital solutions to fight COVID-19
A new Council of Europe report has identified a number of shortcomings in the protection of privacy and personal data in some of the legal and technical measures adopted by governments to prevent the spread of the COVID-19 pandemic among the 55 African, Latin-American and European countries which have joined the data protection “Convention 108”. The report, “Digital solutions to fight COVID-19”, provides an analysis of the impact on the rights to privacy and data protection of the legislative framework and policies adopted by governments as well as an in-depth and technical review of digital contact tracing applications and monitoring tools.
It calls on governments to ensure the transparency of digital solutions in order to guarantee the respect of the rights to privacy and data protection. It also regrets that in spite of numerous calls for coordination and interoperability of digital solutions to prevent the spread of the COVID-19 pandemic, countries have individually implemented widely diverging systems, thereby limiting the efficiency of the measures taken.
The report identifies shortcomings in a number of countries concerning compliance with the principles of “Convention 108” with regard to issues such as the requirement for a legal basis of the measures adopted, their proportionality and aspects such as their justification by public interest and the consent of the data subject for data processing.
It points out that in some countries, the boundaries between healthcare and police enforcement purposes have been sometimes blurred. The report also points to data protection risks related to the security, storage and sharing of data, which has led to the withdrawal of certain measures in some countries.
The report contains the findings of a survey among the States Parties to “Convention 108” on the use of digital solutions to control the dissemination of the virus. Out of the 47 respondents participating in the survey, 36 use apps for contact tracing or proximity alerts (77%), 20 for self-diagnosis (43%), 11 for quarantine enforcement (23%) and 8 for mapping travel patterns (17%). Only two countries used apps for crowd control and another two for immunity passports.
Finally, the report welcomes that 20 countries participating in the survey have published the apps source codes, a measure that can contribute to building the trust of users and making the apps effective. To further strengthen this trust, the reports recommend involving civil society and the general public in the development of digital solutions and transparency measures.
The Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, also known as “Convention 108”, is the only legally binding instrument on the protection of privacy and data protection open to any country in the world.
The full report “Digital solutions to fight COVID-19” is available at the following link.